Commit Graph
100 Commits
Author SHA1 Message Date
Stuart Gathman 04eeeab2e1 Clarify docs. 2007-07-25 15:20:41 +00:00
Stuart Gathman cdfeb2d792 Ban ips on bad mailfrom offenses as well as bad rcpts. 2007-07-02 03:06:10 +00:00
Stuart Gathman 46545cab94 Fix missed comcast dynip. 2007-06-28 20:33:25 +00:00
Stuart Gathman 9a8fdcb120 Ban IPs based on too many invalid recipients in a connection. Requires
configuring check_user.  Tighten HELO best_guess policy.
2007-06-23 20:53:05 +00:00
Stuart Gathman 218f5168bc Do not process valid SRS recipients as delayed_failure. 2007-04-19 16:02:43 +00:00
Stuart Gathman ddbb8ac3ea Ban ips with too many bad rcpts on a connection. 2007-04-15 01:01:13 +00:00
Stuart Gathman a2215124bb Ban ips with too many bad rcpts on a connection. 2007-04-15 00:54:30 +00:00
Stuart Gathman e505d2bb28 Check access_file at startup. Compress rcpt to log. 2007-04-13 17:20:09 +00:00
Stuart Gathman 9f40f265cd Stop querying gossip server twice. 2007-04-05 17:59:07 +00:00
Stuart Gathman 20a875b84d Don't disable gossip for temporary error. 2007-04-02 18:37:25 +00:00
Stuart Gathman 1da5ca54b5 Report bestguess and helo-spf as key-value pairs in Received-SPF
instead of in their own headers.
2007-03-30 18:13:41 +00:00
Stuart Gathman bac593f05d Don't count DSN and unqualified MAIL FROM as internal_domain. 2007-03-29 03:06:10 +00:00
Stuart Gathman dbba488d58 Do not CBV for internal domains. 2007-03-24 00:30:24 +00:00
Stuart Gathman 6936b599fe Get SMTP-Auth policy from access_file. 2007-03-23 22:39:10 +00:00
Stuart Gathman cee38f8149 Properly log From: and Sender: 2007-03-21 04:02:13 +00:00
Stuart Gathman 188e8256f3 Gossip configuration options: client or standalone with optional peers. 2007-03-18 02:32:21 +00:00
Stuart Gathman 4013365a3d New delayed DSN pattern. Retab (expandtab). 2007-03-17 21:22:48 +00:00
Stuart Gathman e571ccc5a5 Fix missing HELO log. 2007-03-13 21:18:28 +00:00
Stuart Gathman f65294b470 Include Received-SPF in permerror DSN. 2007-03-13 18:45:09 +00:00
Stuart Gathman b2d8e838a2 Fix continuing findsrs when srs.reverse fails. 2007-03-03 19:18:57 +00:00
Stuart Gathman f136e973dc Improve delayed failure detection. 2007-03-03 18:46:26 +00:00
Stuart Gathman d289822f42 Handle DNS error sending DSN. 2007-03-03 18:19:40 +00:00
Stuart Gathman 806aa5a6de Updated 2007-03-02 14:18:21 +00:00
Stuart Gathman e84a803cc1 Handle missing HELO. 2007-02-21 22:14:41 +00:00
Stuart Gathman 20612240f3 Use re for auto-reply recognition. 2007-02-07 23:21:26 +00:00
Stuart Gathman c9e6bb68d9 Newbie friendly default for internal_connect 2007-02-07 23:20:28 +00:00
Stuart Gathman 4d69b8fbfe Handle null in header value. 2007-01-26 03:47:23 +00:00
Stuart Gathman 21e3c6f489 Persist blacklisting from delayed DSNs. 2007-01-25 22:47:26 +00:00
Stuart Gathman 83529320ae Add private relay. 2007-01-23 19:46:20 +00:00
Stuart Gathman e5685c6035 Convert tabs to spaces. 2007-01-22 02:46:01 +00:00
Stuart Gathman 4c72135b0e Move parse_header to Milter.utils.
Test case for delayed DSN parsing.
Fix plock when source missing or cannot set owner/group.
2007-01-19 23:31:38 +00:00
Stuart Gathman 393aa6140a Doc update.
Parse From header for delayed failure detection.
Don't check reputation of trusted host.
Track IP reputation only when missing PTR.
2007-01-18 16:48:44 +00:00
Stuart Gathman 2a6a68230b REJECT after data for blacklisted emails - so in case of mistakes, a
legitimate sender will know what happened.
2007-01-16 05:17:29 +00:00
Stuart Gathman 279c831a8e Purge old entries in auto_whitelist and send_dsn logs. 2007-01-11 19:59:40 +00:00
Stuart Gathman c0aa632e16 Negative feedback for bad headers. Purge cache logs on startup. 2007-01-11 04:31:26 +00:00
Stuart Gathman a875ac7834 Documentation updates. 2007-01-10 04:44:25 +00:00
Stuart Gathman 9f8cef5ee2 Get user feedback. 2007-01-08 23:20:54 +00:00
Stuart Gathman 4b0e7b22da Tested on spidey2 2007-01-06 04:32:57 +00:00
Stuart Gathman 40fb05b0e3 Forgot import 2007-01-06 04:25:12 +00:00
Stuart Gathman 8ae7bd4217 Add config file to spfmilter 2007-01-06 04:21:30 +00:00
Stuart Gathman 139e141e1e Make blacklist an AddrCache 2007-01-05 23:33:55 +00:00
Stuart Gathman 8932dc36db Move parse_addr, iniplist, ip4re to Milter.utils 2007-01-05 23:12:13 +00:00
Stuart Gathman bda654b7a0 Added sample spfmilter.py application. 2007-01-05 22:48:48 +00:00
Stuart Gathman 09b671f47b Test AddrCache. 2007-01-05 21:26:03 +00:00
Stuart Gathman 732e7317f1 Move AddrCache to Milter package. 2007-01-05 21:25:40 +00:00
Stuart Gathman 702ec2d4ca Link to pyspf. 2007-01-05 21:24:29 +00:00
Stuart Gathman 7bbff66000 Release 0.8.7 2007-01-04 18:04:37 +00:00
Stuart Gathman 5ad6d321bd Do plain CBV when template missing. 2007-01-04 18:01:11 +00:00
Stuart Gathman d01dc65f39 Use HELO identity if good when MAILFROM is bad. 2006-12-31 03:07:20 +00:00
Stuart Gathman b703031c7e Skip reputation/whitelist/blacklist when rejecting on SPF. Add X-Hello-SPF. 2006-12-30 18:58:53 +00:00
Stuart Gathman 1bc0a4faef Reject on bad_reputation or blacklist and nodspam. Match valid helo like
PTR for guessed SPF pass.
2006-12-28 01:54:32 +00:00
Stuart Gathman 2bea6ad76f Add archive option to wiretap. 2006-12-19 00:59:30 +00:00
Stuart Gathman c9f0c94b92 Reject multiple recipients to DSN.
Auto-disable gossip on DB error.
2006-12-04 18:47:04 +00:00
Stuart Gathman 59bf86e747 Release 0.8.7 2006-11-22 18:32:37 +00:00
Stuart Gathman 8f5513a502 SRS domains were missing srs_reject check when SES was active. 2006-11-22 16:31:22 +00:00
Stuart Gathman 87482d5740 Replace last use of deprecated rfc822 module. 2006-11-22 01:03:28 +00:00
Stuart Gathman b227ca6bb0 Update a use of deprecated rfc822. Recognize report-type=delivery-status 2006-11-21 18:45:49 +00:00
Stuart Gathman dd0125b641 Another lame DSN heuristic. Block PTR cache poisoning attack. 2006-11-04 22:09:39 +00:00
Stuart Gathman a7e98f411e More SPF fixes and tests from pyspf. 2006-10-09 17:59:47 +00:00
Stuart Gathman ea76acdd3d Fix defaults. 2006-10-04 03:46:01 +00:00
Stuart Gathman b92154934b SPF updates from pyspf. 2006-10-04 02:15:57 +00:00
Stuart Gathman 33aeefa19f case_sensitive_localpart option, more delayed bounce heuristics,
optional smart_alias section.
2006-10-01 01:44:06 +00:00
Stuart Gathman 2fe8fa8813 Use latest pyspf verbatim. Will depend on package when pyspf-2.0 is packaged. 2006-10-01 01:42:33 +00:00
Stuart Gathman e0f58cce1f Merge changes from pyspf to pass test suite. 2006-09-08 22:02:57 +00:00
Stuart Gathman 157f33edb8 Permerror for multiple TXT SPF records. 2006-07-31 15:25:39 +00:00
Stuart Gathman 64bf954a17 Remove debug print 2006-07-28 01:21:33 +00:00
Stuart Gathman 357cd1b740 More fixes from pyspf 2006-07-28 01:21:02 +00:00
Stuart Gathman 3a90a35cbc Support CBV timeout 2006-07-26 16:42:26 +00:00
Stuart Gathman 30923ab3a1 Support timeout. 2006-07-26 16:37:35 +00:00
Stuart Gathman d38cf5885e Handle multi-line headers in delayed dsns. 2006-06-21 22:22:00 +00:00
Stuart Gathman 8c4cca8f55 initialize perm_error 2006-06-21 21:13:07 +00:00
Stuart Gathman a20eeda04d More delayed reject token headers.
Don't require HELO pass for CBV.
2006-06-21 21:12:04 +00:00
Stuart Gathman d50215d0ba Include header fields in DSN template. 2006-06-21 21:07:11 +00:00
Stuart Gathman c5b2169509 Remove default templates. Scrub test. 2006-05-24 20:56:35 +00:00
Stuart Gathman 2e42eea306 Release 0.8.6 2006-05-21 04:04:02 +00:00
Stuart Gathman 1c78384da9 Release 0.8.6 2006-05-21 03:56:13 +00:00
Stuart Gathman 053c32e450 Fail dsn 2006-05-21 03:41:44 +00:00
Stuart Gathman b57e365349 Default templates need headers also. 2006-05-21 03:39:59 +00:00
Stuart Gathman 99396a1eee Fail template, move most header fields into template. 2006-05-21 03:30:06 +00:00
Stuart Gathman 528810c31a Create GOSSiP record only when connection will procede to DATA. 2006-05-17 21:28:07 +00:00
Stuart Gathman a9ffc3ae28 a:1.2.3.4 -> ip4:1.2.3.4 'lax' heuristic. 2006-05-12 16:15:20 +00:00
Stuart Gathman eda8680b70 Don't require SPF pass for white/black listing mail from trusted relay.
Support localpart wildcard for white and black lists.
2006-05-12 16:14:48 +00:00
Stuart Gathman afd3e0f042 Check whitelist/blacklist even when not checking SPF (e.g. trusted relay). 2006-04-06 18:14:17 +00:00
Stuart Gathman f42ddbfb53 Fix spec bug 2006-03-25 17:33:36 +00:00
Stuart Gathman 44d76a63d8 0.8.6 release candidate 2006-03-25 17:29:28 +00:00
Stuart Gathman ec4f9fdd99 Import note_error from pyspf. Handle timeout on type99 lookup
specially (sender actually has no SPF record and a braindead DNS server).
2006-03-21 18:48:51 +00:00
Stuart Gathman 6102d641c5 Use re to recognize failure DSNs. 2006-03-10 20:52:49 +00:00
Stuart Gathman d69b805690 Use signed Message-ID in delayed reject to blacklist senders 2006-03-07 20:50:54 +00:00
Stuart Gathman 994bcce7dc Properly report hard PermError (lax mode fails also) by always setting
perm_error attribute with PermError exception.  Improve reporting of
invalid domain PermError.
2006-02-24 02:12:54 +00:00
Stuart Gathman 7f5d8b6b11 Use SRS sign domain list.
Accept but do not use for training whitelisted senders without SPF pass.
Immediate rejection of unsigned bounces.
2006-02-17 05:04:29 +00:00
Stuart Gathman 8d02ab1771 User specific SPF receiver policy. 2006-02-16 02:16:36 +00:00
Stuart Gathman 18759c3698 Remove spf dependency for iniplist 2006-02-12 04:15:01 +00:00
Stuart Gathman 2f533c4591 Use CIDR notation for internal connect list. 2006-02-12 02:12:08 +00:00
Stuart Gathman 04c8b2e1fc Resolve FIXME for wrap_close. 2006-02-12 02:00:42 +00:00
Stuart Gathman 56c1cbd0fd Don't check rcpt user list when signed MFROM. 2006-02-12 01:13:58 +00:00
Stuart Gathman ce51034f69 Use CIDR notation for trusted_forwarder iplist 2006-02-09 20:39:43 +00:00
Stuart Gathman 285d4663c9 put back eom condition 2006-01-30 23:14:48 +00:00
Stuart Gathman 5830e13d00 New milter.log tags 2006-01-12 20:53:51 +00:00
Stuart Gathman 1b685fca76 Accelerate training via whitelist and blacklist. 2006-01-12 20:31:24 +00:00
Stuart Gathman 71e769ef0c New FAQ 2006-01-05 03:17:10 +00:00